comply-fix

Identify and remediate failed HIPAA/NIST controls with automated patches and re-scans.

10|5|Updated Mar 22, 2026
One-click install
npx skills add https://github.com/aanishs/em-dash --skill comply-fix
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: comply-fix
Source: https://github.com/aanishs/em-dash/tree/main/skills/comply-fix
Command: npx skills add https://github.com/aanishs/em-dash --skill comply-fix

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Remediate HIPAA compliance failures by identifying the next failed NIST control, showing what failed, and providing fixes that are re-scanned for verification.

Core Features & Use Cases

  • Find failed controls: locate the next HIPAA/NIST control that did not pass.
  • Load and review: present the failing control details, rationale, and required actions.
  • Generate and apply fixes: create patches for code, IaC, and policy gaps, apply them, and re-scan to verify results.
  • Audit and record: log outcomes in a local SQLite database for traceability.
  • Use Case: When a HIPAA control fails after a scan, run comply-fix to automatically propose and apply fixes and confirm remediation.

Quick Start

Invoke the comply-fix workflow to remediate the next failed HIPAA/NIST control and re-scan to verify.

Frequently Asked Questions about comply-fix

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate HIPAA control remediation after a failed security scan?

Automated HIPAA remediation identifies the next failed NIST control, generates fixes for code or IaC, applies them, and re-scans to verify. Outcomes are logged in a local SQLite database for audit traceability.

What is the process for fixing failed NIST controls in a cloud infrastructure project?

Fixing failed NIST controls loads the failing control details, generates cloud configuration adjustments or policy documents, applies the fixes, and runs a verification re-scan to ensure compliance posture.

Can I generate policy documents automatically to close HIPAA compliance gaps?

Yes, you can generate policy documents automatically to close HIPAA compliance gaps. The workflow identifies the specific policy gap from the failed control details and produces the required document as part of the remediation patch.

Does automated compliance remediation support infrastructure as code validation?

Automated compliance remediation supports IaC validation by generating fixes for infrastructure configurations that fail NIST or HIPAA controls, applying the patches, and re-scanning the infrastructure to verify compliance.

What is the best way to maintain an audit trail for HIPAA remediation actions?

The best way to maintain an audit trail for HIPAA remediation is using a local SQLite database. It records the outcomes of applied fixes and re-scans, providing traceable compliance verification during security posture reviews.

Do I need prior scan results before running automated HIPAA remediation?

Yes, prior scan results are required because the remediation workflow selects the next failing HIPAA or NIST control to process. The tool uses these failures to generate targeted code, IaC, or policy fixes.